Disclosed Chromium Security Bugs

Site-Isolation bypass: Renderer-forgeable download policy leaks post-redirect URL

#517178299•Reporter: vm...@google.com
$0
9/10/2026

Cross-origin layout-size oracle via unclipped ScrollRectToVisible

#517122234•Reporter: vm...@google.com
$0
9/10/2026

Timing-Allow-Origin and SOP bypass in ServiceWorkerSubresourceLoader

#517092658•Reporter: vm...@google.com
$0
9/10/2026

Potential Safe Browsing hash bypass via lack of sparse file truncation during download resume

#516534546•Reporter: vm...@google.com
$0
9/10/2026

Missing ShouldExport checks in chrome.downloads APIs allow interaction with internal downloads

#514556469•Reporter: rj...@google.com
$0
9/10/2026

Potential stale UI in JsOptimizations bubble allows incorrect origin permission grant

#514074827•Reporter: vm...@google.com
$0
9/10/2026

Label-boundary spoofing via U+30FB (Katakana Middle Dot) adjacent to digits

#514069596•Reporter: vm...@google.com
$0
9/10/2026

Origin Spoofing in Media Controls via insecure opener URL traversal

#514056835•Reporter: vm...@google.com
$0
9/10/2026

Cross-origin download permission bypass via shared TabDownloadState callback queue

#514055890•Reporter: vm...@google.com
$0
9/10/2026

Potential UI spoofing in TWAs via unclamped splash screen fade-out duration

#514017067•Reporter: vm...@google.com
$0
9/10/2026
Showing 151-160 of 13222 bugs
1...151617...1323